Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366466303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366466303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: XeWd9umLL/IFYuCGqdnMeCRw8ZRydZc9Vua7fwfX3fI=
Subject key identifier: DC:A3:46:A7:4C:8E:2F:8B:25:DA:27:F4:F6:87:68:EB:4C:F7:BC:D1
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 613704BDC46D4ACA5FEC1FFAEEEA52E622EFABBF
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366466303a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 08 Feb 2025 20:10:30 +0000
ROA not before: Sat 08 Feb 2025 20:05:30 +0000
ROA not after: Sat 07 Feb 2026 20:10:30 +0000
asID: 16909
IP address blocks: 2a14:7584:6df0::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 15 Feb 2025 20:42:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:37:04:bd:c4:6d:4a:ca:5f:ec:1f:fa:ee:ea:52:e6:22:ef:ab:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Feb 8 20:05:30 2025 GMT
Not After : Feb 7 20:10:30 2026 GMT
Subject: CN=DCA346A74C8E2F8B25DA27F4F68768EB4CF7BCD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e8:61:ee:cf:a3:9d:3c:c9:54:3d:f3:44:c0:
b5:de:49:07:3d:7c:c4:6a:eb:59:4e:56:4f:7c:ba:
74:2d:75:f5:00:47:5e:e7:a4:77:0c:42:71:05:e0:
45:db:7f:34:1f:4e:9a:a4:95:f1:79:95:cb:d8:eb:
19:81:e5:e8:92:dc:63:d8:0e:08:37:13:8f:7c:a2:
45:9b:e0:b2:53:46:bb:d0:bb:92:bd:06:41:02:a0:
09:b6:f9:3b:7d:fe:5d:cd:79:63:96:07:03:ee:94:
c9:98:0b:e9:d6:4e:eb:eb:40:6c:9f:2c:33:8c:bf:
43:fe:00:97:d3:a9:b0:dd:62:4e:e8:e6:36:38:a3:
1f:99:33:fd:0d:1d:c6:a0:7d:2f:2d:7d:d7:bc:79:
c6:0d:df:3b:15:af:22:a6:c2:92:b8:01:79:76:32:
6d:f6:20:74:02:0a:3d:fe:f8:66:fb:12:13:1f:2e:
da:82:54:e0:eb:25:b9:f1:bc:af:27:fc:7a:65:a9:
13:58:e8:08:49:d4:8e:0b:0b:24:6c:b6:e8:42:7f:
4d:ec:22:24:87:11:62:a5:00:a9:fc:83:28:7e:ec:
b3:35:8a:44:4f:6b:23:73:68:f8:db:f9:7a:6f:47:
0d:35:02:11:6a:e2:16:15:b8:66:9a:94:b2:25:f2:
7e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A3:46:A7:4C:8E:2F:8B:25:DA:27:F4:F6:87:68:EB:4C:F7:BC:D1
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366466303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6df0::/48
Signature Algorithm: sha256WithRSAEncryption
32:1d:92:3e:60:c9:4b:a0:95:b8:e9:d7:d3:34:c2:04:d4:d9:
54:a4:12:cf:de:e3:3a:ab:74:c5:09:93:4d:a1:e4:e7:15:96:
96:18:67:52:dd:85:da:f0:b7:5f:23:8b:a8:8f:0e:9d:87:b9:
3b:03:87:0f:e1:9b:35:3f:6d:76:64:71:53:49:65:8d:fc:17:
55:5f:a4:df:cf:7a:4f:9f:a1:89:10:ea:fa:0f:d1:ef:6b:95:
d3:14:79:55:43:23:e0:69:9f:ec:f4:e5:9a:fc:d9:b0:75:bb:
a3:8d:37:bc:5e:31:f0:5a:e1:f7:fc:ff:10:92:b7:35:7a:5e:
7a:e4:31:97:05:7e:68:b4:0b:c0:61:f2:a1:7d:9c:53:ac:41:
ee:99:97:7a:19:b4:fe:c9:49:0f:4d:ab:aa:61:60:74:6a:82:
b8:9b:3a:87:64:9d:a8:4b:15:80:1a:f7:25:96:11:9a:c2:18:
cf:d4:b6:80:7f:29:a8:81:27:0c:73:ae:82:a5:05:c7:a8:aa:
b5:c6:d0:5c:75:f4:25:87:f2:2f:20:fa:be:22:01:e1:83:94:
d2:0c:a6:b0:07:0d:be:82:cc:19:e8:e4:08:b4:95:74:6b:b3:
b0:45:1c:89:f5:e8:f0:01:69:0f:41:44:97:eb:2b:1a:62:45:
26:4c:3d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:51:39 2025 by rpki-client